Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
carbon-codemod
Advanced tools
This is a collection of codemods that help you upgrade to a new version of carbon-react
.
The release notes of carbon-react
will indicate which codemod you should use.
npx carbon-codemod <name-of-codemod> <target>
npm link
cd my-other-project
npm link carbon-codemod
npx carbon-codemod
node --debug-brk ./bin/carbon-codemod
The return value of the function determines the status of the transformation:
Status | Condition | Successful |
---|---|---|
ok | A string is returned and it is different from passed source | :white_check_mark: |
skipped | If nothing is returned, the file is not supposed to be transformed | :white_check_mark: |
unmodified | If a string is returned but it's the same as the source | :x: |
error | If the transform throws an Exception | :x: |
npm test
defineTest
to write new tests, this will create a fixture test and an idempotent test.semantic-release
.semantic-release
.semantic-release
will decide, based on the commits that have been merged, if a new release
is required.FAQs
carbon-codemod
The npm package carbon-codemod receives a total of 1 weekly downloads. As such, carbon-codemod popularity was classified as not popular.
We found that carbon-codemod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.